9.5/_logout_controller_8php_source.html

<?php

declare(strict_types = 1);

namespace ‪TYPO3\CMS\Backend\Controller;


/*

 * This file is part of the TYPO3 CMS project.

 *

 * It is free software; you can redistribute it and/or modify it under

 * the terms of the GNU General Public License, either version 2

 * of the License, or any later version.

 *

 * For the full copyright and license information, please read the

 * LICENSE.txt file that was distributed with this source code.

 *

 * The TYPO3 project - inspiring people to share!

 */


use Psr\Http\Message\ResponseInterface;

use Psr\Http\Message\ServerRequestInterface;

use ‪TYPO3\CMS\Backend\Routing\UriBuilder;

use ‪TYPO3\CMS\Core\FormProtection\FormProtectionFactory;

use ‪TYPO3\CMS\Core\Http\RedirectResponse;

use ‪TYPO3\CMS\Core\Utility\GeneralUtility;


class ‪LogoutController

{

    public function ‪logoutAction(ServerRequestInterface $request): ResponseInterface

    {

        $this->‪processLogout();


        $redirectUrl = $request->getParsedBody()['redirect'] ?? $request->getQueryParams()['redirect'];

        $redirectUrl = GeneralUtility::sanitizeLocalUrl($redirectUrl);

        if (empty($redirectUrl)) {

            $uriBuilder = GeneralUtility::makeInstance(UriBuilder::class);

            $redirectUrl = (string)$uriBuilder->buildUriFromRoute('login', [], $uriBuilder::ABSOLUTE_URL);

        }

        return new ‪RedirectResponse(GeneralUtility::locationHeaderUrl($redirectUrl), 303);

    }


    public function ‪logout()

    {

        trigger_error('LogoutController->logout() will be replaced by protected method processLogout() in TYPO3 v10.0. Do not call from other extension.', E_USER_DEPRECATED);

        $this->‪processLogout();

    }


    protected function ‪processLogout(): void

    {

        if (empty($this->‪getBackendUser()->user['username'])) {

            return;

        }

        // Logout written to log

        $this->‪getBackendUser()->‪writelog(255, 2, 0, 1, 'User %s logged out from TYPO3 Backend', [$this->‪getBackendUser()->user['username']]);

        $backendFormProtection = ‪FormProtectionFactory::get();

        $backendFormProtection->removeSessionTokenFromRegistry();

        $this->‪getBackendUser()->‪logoff();

    }


    protected function ‪getBackendUser()

    {

        return ‪$GLOBALS['BE_USER'];

    }

}